skysight-inc/HackerNews huggingface dataset:
Seems like the wrong question if you believe in evolution. That is humans did not evolve to sit as we sit today. I am trying to regain my ankle mobility and be in a squat position more. We also didn’t evolve to stand still at a standup desk for hours.
In the past they said that there's never any justification for emulation and that it ruins the player experience, seems like it depends on how much money they make out of it.
The early access was also open though (the whole repo was FOSS and up to date in the end) - you just had to build it manually.

This situation really sucks because soon there will be the Switch 2, and then maybe in 5 years or so you won't be able to play a lot of these games easily anymore (nevermind at good resolutions, etc.).
From the look of the github repository for the development tools it looks like you can plug it directly into a host and interact with it through `dd`: https://github.com/signaloid/C0-microSD-utilities/
In my fediverse server project[1], I convert all user-uploaded images to high-quality webp and store them like that. I discard the original files after that's done. I use imgproxy[2] to further resize and convert them on the fly for actual display. In general, I try my best to treat the original user-uploaded files like they're radioactive, getting rid of them as soon as possible.

I don't do videos yet, but I'm kinda terrified of the idea of putting user-uploaded files through ffmpeg if/when I'll support them.

[1] https://github.com/grishka/Smithereen

[2] https://github.com/imgproxy/imgproxy
Small projects become bigger projects much faster than that! I’m not suggesting that anybody should think too far ahead when it comes to building mvps, but if it’s a choice between a typed language and a dynamic one like JavaScript, baking a poor decision in early is going to hurt later. And later is much sooner than you think.

That’s not going to negatively affect your initial velocity, if it does, the team isn’t strong enough.

If the project is just a one off website or something genuinely small, sure, who cares? Otherwise it's worth realising that you'll be dealing with the fallout of poor early decisions pretty quickly.
sure... but why not? stuff like Silent Partner are cool and super expensive because they aren't produced anymore. you may also agree with the fact that gear is sometimes expensive for what they really are. and i can see no problem in printing a carabiner that's proven to fail at the same rate of a commercial one, or custom nuts for a specific geography! and can't metal 3D printing be used at industry to lower the costs of production, given it's cheaper than more traditional methods?
This is your moment. Let's hear about alternatives.
People think typescript is really the silver bullet. If a developer writes crappy code, using tool x will not make him write great code. and the tool may not improve the project either. It's really tiring to work with people like you who are morbidly in love with a tool.
Rockr looks cool. Is it your project? If so, you should do a Show HN. A blog post with a bunch of bullet points isn't interesting for a general audience.

Also, I think it would be cool if you record the mic in the app, so that you can directly loop things you play or sing or even random noises you hear.
The same as when you talk to a random person at a pub. All illegal and just vibes, always - that is the default.
Debugging is pretty easy with something like Ray (https://myray.app/) or Laravel Herd (https://herd.laravel.com/, despite its name runs differnet php apps just fine).

When it coems to running different PHP versions, modern PHP development has largely moved to using Docker (ddev, for example: https://ddev.com/) for that, and there's plenty Docker images for old PHP versions so it's a non-issue. I'd also imagine it be difficult to get many other outdated programming languages via a package manager.

There's now the PHP Foundation, which while relatively new in its formation, has significantly boosted PHP development and I'd recommend donating if improving the language is important to you.
If you change the behavior of fopen() by installing an error handler that throws an exception, won't that mess up library code that doesn't expect that behavior? Seems hacky and error prone to me. (Also the race condition others already mentioned!)
> in any scripting language

Scripting? Ha! We used to do CGI in C when Perl wasn't fast enough. <old-man-yells-at-cloud />
I really like the concept of triggering it explicitly. I hope something like that becomes part of the standard UI for these things. Getting the UI right is a major part of how useful these will be.
“Pardon my intrusion, you may already know this and I hate to be a bother, but you appear to be on fire.”
> interview game

Yes, mediocre people like to select the same.

> Handling minor everyday disagreements

is a skill that does not need to be "prepared for" in an interview. And naturally the mediocrities that think asking the standard question and getting the standard answer back are also in for a surprise.
> I saw a McKinsey report claiming that higher-powered chargers are very profitable.

That's IF people are using the charger. If they aren't, then the fees for reserved power will eat you alive.
Franken UI is an HTML-first, open-source library of UI components based on the utility-first Tailwind CSS with UIkit 3 compatibility. The design is based on shadcn/ui ported to be framework-agnostic.
IMO what's really needed is for most of these 'checks' to be made illegal. Then those who are willing and prepared to take on the risks associated with being a landlord can do it. Many other industries have regulations preventing all sorts of background checks that companies might otherwise want to do (e.g. insurance).
I don't understand how you program the risc-v core though... anyone use this?
Peeking into the Ocean's Microscopic Baby Boom
Our detection model at ipinfo is largely based on behavior models of IP addresses. We have 700 servers around the world from which we run internet measurement, allowing us to reliably determine which IP addresses are VPNs or proxies. These measurements are largely ping/traceroute data, which enable us to estimate a number of different things most importantly IP location data.

If you are interested in what kind of other information we can discover from our internet measurements, check out our tags page: https://ipinfo.io/tags
This is not for you to get the real IP. What I described is for you to give to Cloudflare support so that they can look through any logs they may have and find the needle in the haystack of data. I am making an assumption that they log access to anything that might act like a forward proxy abusing their worker code, etc... Only Cloudflare employees could really say if the data is useful. If it is then they could get the real IP address and maybe even do some captures of their own to update their attack / bot detection assuming this is of interest to them.

If they are unable to help then the best I could suggest would be to keep that abusive IP blocked at the risk of legit people also being blocked. Another potential option would be to just exclude logging from that IP or URL request patterns if they are not actually hurting your server. NGinx and Apache allow excluding or including status codes to log to get rid of noise. One can always disable this when debugging.
You don't need a 'bespoke AOSP' to turn your phone into a Rabbit R1
Completely agree. If I look at apes definitely more sitting than standing, which still tells next to nothing about what is best for humans.

We know the answer - all kinds of movement, every day, not too intense but tons of it and not some 30 minute effort mixed with 12 hours of sitting. And bodybuilding as such has really nothing with evolution or whats good long term, just fashion and chasing women / childhood issues.
In 3 decades in this disappointing field every single interaction with a recruiter has been an utter waste of time.
One of the impediments to BBS'ing was the extraordinarily high cost of connection. Luckily I go early access to arpanet, uucp, and bitnet as a middle school and high school student in the 80s.

AT&T phone rates were outrageously high in the 80s and early 90s. In todays money, calling a non-local BBS would cost ~20$ / hr. Personally I could not afford and my parents would have been aghast.

I think some got involved in the phreaking and hacking scene because of the usurious rates.
Also each one probably also has its own fully traceable and auditable supply chain, with a record of every step, including who signed off on it, when and where, from the moment it entered the refinery, and the records are guaranteed to be kept available for decades, along with storage and maintenance of the tooling and capacity to make more at short notice indefinitely. Plus the costs of getting the contract sorted and the part specced and signed off on in the first place, amortised across the relatively small initial batch.

Presumably there for political protection as much as anything else: "Bushinggate topples Senator after it's revealed a Russian company supplied the titanium" or "Scandal of the aircraft parts Anerica has forgotten how to make".
Downvote and move on, it's a mostly unfiltered link aggregator. There may be bots active upvoting things though.
Nice personal hosted image service!
What do you do with the uploaded images? You could be exposed to risks that may not be immediately obvious.

I have seen a team struggle for over a month to eliminate NSFW content - avatars - uploaded by a user that lead to their site being demonetised.
No because bleach is a cleaning product and it works. But I don’t want a pharmacy advertising sugar pills as being able to cure anything outside of your sweet tooth. Obviously this is an extreme example (I’m sure even the USA doesn’t allow sugar pills to be sold as actual medicine) but I’m taking from this thread that there are ineffective medicines being sold but potentially useful medicines being blocked. Maybe I’m wrong, I don’t live in the US.
Until there's consolidation and it's no longer local but national or multi-national, or global companies like Blackrock et al who own controlling shares and board member positions to steer the companies how they choose.

But there is a good point and pattern to notice here, that further consolidation into a global companies providing internet access put resources and power into even fewer hands, but now that power is no longer being held by potentially authoritarian politicians and their Gestapo.

The solution for that means requiring multiple satellite internet providers, and people paying attention always to prevent a critical mass or majority of them from capture by bad actors - which we know happened with MSM consolidation, as well as more recently with social media platforms all illegally colluding with the US government - exposed due to Elon buying Twitter-X and releasing the Twitter Files.

But what point were you trying to make? That Starlink is bad for local economies because people are paying a non-local company?
Ask HN: A search engine that excludes all sites with ads and/or paywalls?
I've decided to leave Google Search. It was nice for decades, but declined to being unusable.

Now I primarily use ChatGPT and Claude for my information.

However, I still need a search engine to find primary datasets, primary images, et cetera.

I prefer content from the personal blogs and websites of real people. I particularly love researchers who post their research to their own sites (in addition to or in preference of journals).

What engine should I switch to?

I don't want any sites to appear that contain ads or paywalls.

Right now I'm using Kagi, but appending site:*.edu to my queries to exclude paywall sites like ResearchGate.net.

Is there something better?
You would. And if the juniors don't really _write_ code in the languages you use, if they don't make mistakes and do research themselves, it'll take them a lot longer to learn them sufficiently to be able to do those reviews.

Listening to people talk in Japanese, I picked up enough to have some idea what they're talking about. I can't speak the language beyond some canned phrases. I certainly wouldn't claim to know Japanese. And I definitely wouldn't get a job writing books in Japanese, armed with Google Translate.

For programming, my solution to this right now is lots of pair programming. Really gives you a good idea of where somebody is at, what they still need to learn, and lots of teaching opportunities. I just hired a junior and we spend about 8 hours a week pairing.
Are you suggesting that Ecobee devices don't work offline? I've never connected mine to the internet and it's worked swimmingly for the last 6 years.
> think Ansible, but imperative

For basically all purposes ansible is imperative.
> Isnt this what code reviews are for?

There is no substitute to doing something correctly in the first place. The problem is that in the real world, deadlines and lack of time will always cause the default solution to be accepted a small percentage of time even when it is not ideal. The increasing creep of AI will only exacerbate that and most technophiles will default into thinking of a new and improved AI tool to help with the problem, until it will be AI tools all the way down.

No thanks.
I've seen sites in the wild which use Firebase for login and break in Firefox. Apparently you have to launch it as a popup which Firefox tends to suppress or make a proxy from yoururl.com to google.com.

https://firebase.google.com/docs/auth/web/redirect-best-prac...
>I rarely see problems that are due to typing

This is a fallacy similar to the Blub paradox: if your language has a weak[1] type system, then it isn't capable of recognizing many problems as "type error". But stronger type systems can express stronger invariants. So something that isn't a type error in one language will be a type error in another. This changes how the programmer conceives of problems.

Example: missing a case in a switch statement isn't a "type error" in C or Java, but it is a "type error" in languages like Rust or ML, because they have sum types with exhaustiveness checking. Other examples: array bounds checks can be eliminated with dependent types; lifecycle bugs like use-after-free and double-free can be eliminated with substructural types.

[1] "weak" in an informal sense of "not very expressive"
I do all my work from bed, I'd say 99%. Remaining 1% is odd meetings.

Does that count as sleep?
Transgenic Golden Rice, once hailed as a dietary breakthrough
If you want complete type erasure, then a system that ensures monomorphism is critical to good JS performance.

If you can leave the type system in place, then you could move toward an ML-style type system and see massive improvements within strictly-typed parts of the code as you'd only need type guards and inline caches at the boundaries of the strictly-typed code.
Ive been using zettel notes, on fdroid. It can handle the git syncing. Keys are managed in app as well which i have mixed feeling about but overall its been great for moving from obsidian to a completly self managed system.
PHP is fine, the problem is one request per worker, but for small projects not so important.
I had the misfortune of having to use PHP again last year for six months, after not having used it in more than a decade. My opinion is that while it certainly has improved in some aspects, it still sucks very much.
> What matters is that you have a _PROPER_ range hood. One that vents outside and one that isn't integrated into a microwave oven.

Not wrong, but given how many people have an 'improper' range hood, or a proper one that is never used (often because it is "too loud), or no range hood whatsoever (a common situation in rentals), you're stuck with chemicals in your home.

> Whether you're cooking on gas or electric at that moment really doesn't matter.

Yes it does: all cooking will generate chemicals, but you're adding extra ones by using a combustible heat source.
When I think about numbers like that it just seems (to me, and wrongly) like general progress that's not so crazy - the thought that really makes the speed of progress stand out to me is remembering when loading a single image - photo sized but not crazily high resolution - over dial-up was slow enough that you'd gradually see the image loading from top to bottom, and could see it gradually getting taller as more lines of pixels were downloaded and shown below the already loaded part. Contrasting that memory against the ability to now watch videos with much higher resolution per frame than those images were 30 years ago is what really makes me go "wow".

For anyone not old enough to remember, here's an example on YouTube (and a faster loading time than I remember often being the case!): https://youtube.com/watch?v=ra0EG9lbP7Y
The issue is accountability. A big centralised server has accountability built in to some extent, because you can find and sue or jail the bastards that own it. Decentralised, is often conflated with anonymity and hence zero accountability.

But it doesn’t have to be this way. For something like source control, must we have anonymity? You wouldn’t require all that much PII to deter most bad actors, I would have thought. Maybe the PII bits can be stored in a different system that provides cryptographically signed assertions. You remain anonymous, but can assert your identity is stored in X. Law enforcement have the power to recover the PII if there is a warrant. Like some of the proposals for asserted qualifications in Europe and such.
I understand the issue, I have checked /dev/pts/ and seen systemd-run create a user readable pts there. I'm not adverse to that one getting chown()'d, but there really isn't any impact from it.

The problem is you can not hijack (meaning command exec right?) a root shell running under your account with this unless there is an approach that hasn't been mentioned yet. You can read character input, stopping the program from receiving input while you are doing so, of a process your user account directly started. I investigated the other ways and he hasn't given a viable one beyond running stuff directly in shell of the target session (TIOCSTI doesn't work if you target a different pty) or using ptrace.

All of these apply to other programs as even though they set root permissions on their pty as you can influence their parent. You need to chown both if you want to stop issues, but that'll probably break stuff.
To be clear his whole point is that systemd is less secure compared to sudo etc but is using something that applies to everything to try and show that, involving using pocs that didn't even show the issues he was claiming, which is disingenuous.
Show HN: Client only public key authentication IdP (similar: SSH and OAuth 2.1)
> fittest person in the room 90% of the time

Shifting goalposts, just like x% of richest controlling y% of wealth.
I missed working in US mega-corps. When they announce initiatives like that (with fanfare), and spend 50% of time and effort on marketing and planning, and 20% on the actual effort (as new resources are not added and existing resources are not 'allowed' to dedicate any/much time on that latest new initiative).

I was listening to Security Now a couple of weeks ago (I didn't read/research on this further) and they said that some LLM ran through the CVEs and from the description only managed to successfully create code to take advantage in 70%-80% of them.

It is amusing how MS is losing the "NOBUS" game, got bitch-slapped by the EDPS a couple of months ago, and need to say/do something to save face.

In Project Management the deal is "say-do-say". To what @wepple wrote above, it would be interesting to see on a semi-annual basis what the latter 'say' is (what did they actually did/and it worked). Understanding the sensitivity of security impact "hey we found XYZ vuln on ABC system" would be irresponsible for people still using said-ABC outdated system.

(semi-rant, but my honest thoughts)(I wish MS the very best, I got some stocks of MS so I want them to succeed) :)
As already mentioned, weight lifting concentrates on a few muscles/muscle groups. You should switch to Calisthenics, or rock climbing. Maybe accompanied by flexibility training.

The joint pain in the fingers, when not coming from the intensified weight lifting, hints to an increased inflammatory 'ground state' of your body. Check the causes, maybe you need a diet.

The metabolism of humans change around the age of 30-35. So get accustomed to your new normal.

Oh, and avoid carrying your cellphone close to the body. Especially not in the pockets of your jeans.
I think the proper way to do it is to have a string type and a byte-array type, like many other languages do it (not Ruby, that's a mess, too, if you ask me). The string type is always Unicode, can be any kind of UTF encoding in the background, that's an implementation detail. Sadly most languages still require you to know that detail.
I made a comment about zettel notes on the parent, have a look. It fixes some of the problems you talk about. Not sure if theres an apple version.
I think that the reason is more psychological than anything. People who deal with information become unsettled psychologically because they are doing something that is very unnatural, and so new note taking apps is a meaningless gesture that makes them feel that they are under control. Of course, that's not the entire explanation but it does explain partially the proliferation of note-taking apps beyond the basic ones.
Why are open source alternatives so bad? [video]
All I know is that I follow my rules and I'm healthier than 99% of people I meet
Yasssssss! Thank you.

This is the future. I am predicting Apple will make progress on groq like chipsets built in to their newer devices for hyper fast inference.

LLMs leave a lot to be desired but since they are trained on all publicly available human knowledge they know something no about everything.

My life has been better since I’ve been able to ask all sorts of adhoc questions about “is this healthy? Why healthy?” And it gives me pointers where to look into.
If security is the top priority then performance, ease of use, system malleability can no longer be the top priority.
For context, Russia invaded Georgia in 2008 and still occupies a fifth of the country today.

https://youtu.be/quipA4hHCV4
I thought EightySix was pretty good (2021-3)
As a child I would want to go somewhere that was often 2 miles away and for whatever reason a bicycle wasn't used. I didn't consider it cardio I considered getting somewhere.
Resolving 6 key Jetpack Compose UI testing problems
The whole point of the parent comment was that it doesn't, at least when you want to be able to experiment and iterate quickly:

> It is the purest form of web programming. You don't need a framework. Spin up a server and just start writing. Experiment. Do crazy things with it, like an art project. Every page is it's own world. Have fun with it.

Why would that be a bad thing? Even when it comes to something like REPLs, everyone always touts being able to iterate more quickly as a good thing, don't they?

Edit: aside from the implications of an in process language runtime, that was discussed in another comment.
> you probably don't know how to diagnose a coax cable problem

No, that was definitely part of the sysadmin job description ~25 years ago, both line discipline and physical medium problems (I had a TDR and a fiberglass fish at my desk for my first sysadmin job and was kind of bummed to find out that isn't remotely normal anymore)
It’s amazing that this was an issue in 2004 and it’s still an issue today. I don’t have much to add aside from what was already said. There are services like uppy, transload it, etc that simplify this, but might be more expensive than S3+CF.